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Minutes of the OC Executive Board 


8 December 1978 


The following members were present at the 8 December 1978 
OC Executive Board meeting: 


25X1A 


AGENDA ITEM #1: Time In-Grade Guidelin r Promotion Below 
the Basic Grade Levels 25X1 


25X1A 1. [__lintroduced the item by mentioning that the CSB has 


25X1A acted in accordance with Agency regulations in eliminating time in- 
grade as a requirement for promotion. This has engendered some 
confusion and some of our people feel that guidelines are needed. 
(OC-HRD) was asked to put together a paper with 
e paper has been_circulated with the agenda for 
25X1 discussion prior to distribution. A9c4.1 


2. During discussions it was pointed out that the guideline 
draft is aimed principally at Panel D personnel. The amount of time 
required to meet guideline standards could vary considerably depending 
on the luck of rotation between positions affording exposure and 
opportunity to acquire the skills necessary for promotion. It was 
pointed out that the proposed guidelines are intended as guides -- not 
regulations. Under these guidelines it could take 1, 2, 3, or 10 years 
to get to journeyman level. The question is one of acquiring the 
skills, which is generally time related but not necessarily always tied 
to time. It was recognized that there will inevitably be some 
variation in standards exercised by different areas and/or supervisors. 


25X1 25X1 
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It was mentioned that journeyman tests for Panels D and N had been 
eliminated since similar skills tests were not applied to other 
25X1A panels. Messrs. Lae eee Ee that they had been 
: questioned during tnetr about the absence of guidelines 
after elimination of the time in-grade requirement. It was also 
mentioned that the existing regulations and orders provide a con- 
siderable basis for deciding on promotion recommendations and that 
the guidelines are proposed as a supplement and clarification of 
policy regarding eliminating time in-grade as a promotion criterion. 
In the finé alysis, supervisors and managers must use their best 
25X11 judgment. tf A9c4.2 


25X1A 3. [_ asked, aside from some technical corrections, whether 
there were any problems. It was agreed that the guidelines would serve 
some purpose by providing some guidance on promotions without time in- 
25X1A grade requirements. said he would take action to have the 
25X1 guidelines distributed. 25X1 


Procedures, and a COMSEC Equipment Management Program 


AGENDA ITEM #2: Proposals for Requirements Handling and Programmin T_ 


25X1A 1 ae said he had little to add to the substance of the 
papers circulated with the agenda and asked whether there were questions. 


He added that, if approved, the pavers would become an input to an ED 
SOP document and would form some part of an OC processes document within 
I5X1A the reorganized structure. [___]commented that when he first saw the 
paper it appeared to be an engineering procedure, but it became apparent 
that it affected all of OC and for that reason was placed he Executive 
Board agenda. He then asked for an expression of views. ial A9c4,1 25X1 


2. Discussion covered assurance of division level requirement 
input, consideration of packaging by financial accounting number (FAN), 
multi-year use of single year procurements, the purposes and use of 
"network" progra d review and approval of all programs by the OC 

25X1 Advisory Board. leak 


25X1A cm | __Jeonetudea: 


a. These papers are a good contribution to an OC operating 
manual after small technical adjustments are made. 


b. The other side of the coin is that we should be getting 
on with input to the manual. This is a major step forward to 


production of a manual as envisioned by the Ristgpnogiinn Force. 
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Here we are trying to balance these considerations against a three- 
year break-even point. The point was made that if the "backhaul" 
capability is essentially to serve a transponder function, the military 
could possibly provide the capability. said that we haven't 
looked at this possibility but that the asily be bit rate 

and other technical problems. Accuracy of the evaluation of tenability 


was questioned. What ef Nah the 
scene? questioned survivability a t even 
though a major outlay of funds eon 0 it is safe 


we shou for it. This position was genera ed by the 
Board. A9c4.2, A9c2.1 & AQ9a5.2 


3. ee On the basis of a three-year break-even 
point an e relatively low cost, we should go ahead planning 
This is, however, contrary to long range plans and objectives. uld, 
therefore, program the entry point ith an incremental _in- 


crease t an enhanced level. mentioned, an 
agreed, ould coordinate planning ith the Department 
of Interior. A9c4.1, AQc2.1 & 
ecretary 
APPROVED: 


SRANIAA AE 
Date 


Distribution: 
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MEMORANDUM FOR: Chief, Human Resources Division, OC 


unications 


SUBJECT : Promotions Below the Basic Grade Levels 


1. The previous OC decision to eliminate the time-in-grade 
requirements for promotions was based on the need to ensure that 
no OC employees were denied a promotion solely for the lack of 
longevity. The elimination of time-in-grade factors, however, 
was not intended to modify the continuing requirement for a 
period of documented satsifactory performance as a basis for 
promotion. The guidelines below are intended to provide OC 
supervisors with a general yardstick to allow our new OC 
employees, in grades below the basic grade, to achieve promotions 
as they develop the necessary experience and skills required to 
perform at the basic grade levels, rather than being promoted on 
the passage of time. 


2. Promotion recommendations in grades below the basic 
grade level should be initiated according to the following: 


a. PROMOTION TO THE NEXT GRADE BELOW THE BASIC GRADE 
LEVEL. Promotion eligibility must be based on the employee’ s 
Satisfactory performance, which has been documented in a 
current Fitness Report as prescribed [_—S——si|§s=s The STATINTL 
requirement for eligibility should be based on a period of 
acceptable on-the-job training, needed to demonstrate the 
Mastery of the specific duties of the employee's initial 
assignment, which follows completion of entry on duty train- 
ing. An employee in this category would normally be 
expected to achieve the skill levels justifying a promotion 
recommendation within one year after arrival in the initial 
assignment. However, whenever the employee's supervisor 
determines that the promotion requirement has been met, the 
supervisor will recommend a promotion action on the 

// employee's Fitness Report which will also be endorsed by 
the employee's component Chief. The cognizant Panel Chief 
will then review and process promotion actions to comply 
with the semi-annual cycle in the Agency Uniform Promotion 
Schedule (UPS) as outlined for the appropriate grade in 
OCHB 20.20.1, Appendix B. 
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b. PROMOTION TO THE BASIC GRADE LEVEL. Promotion INTL 
eligibility must be based on the employee's satisfactory STAT 


performance, which h nted in a current Fitness 
Report as prescribed The basic grade level 
has been allocated on @ principle that our employees are 


required to master a collection of skills that, although 
seldom found together in one assignment, are demanded of 
our employees through a series of rotational assignments. 
Therefore, promotion actions for employees to the basic 
grade level would be based on, but not limited to, experi- 
ence from a previous duty assignment, as a trainee, and a 
period of acceptable on-the-job training in the new posi- 
tion, which demonstrate the employee's capability to per- 
form the new specific duties with a minimum of supervision. 
An employee in this category would normally be expected to 
achieve the skill levels justifying a promotion recommenda- 
tion within two years after arrival in the next assignment. 
However, whenever the employee's supervisor determines that 
the promotion requirements have been met, the supervisor 
will recommend a promotion action on the employee's Fitness 
Report which will also be endorsed by the employee's compo- 
nent Chief. The cognizant Panel Chief will then review 

and process promotion actions to comply with the semi-annual 
cycle in the Agency Uniform Promotion Schedule (UPS) as out- 
lined for the appropriate grade in OCHB 20.20.1, Appendix B. 


—— STATINTL 
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OCE-M78-529 
29 November 1978 


MEMORANDUM FOR: Director of Communications 


FROM 
Chief, Engineering Division, OC 
SUBJECT : Proposals for a Requirements Handling and 
Programming Procedures, and a_COMSEC 
Equipment Management Program | | 25X1 


is rar ee. for your information are papers 
which out neral procedure for the identification and 
programming of communications requirements, and as a specific 
example, a proposed COMSEC equipment management plan that 
could be implemented within the general procedure. The pro- 
posed methods for dealing with requirements, programming 
actions, and program status feedback to the customer, out- 
lined in Attachment A, are considered a necessary first step 
in meeting Strategic Plan goal 4.4. Some of the actions pro- 
posed have been accomplished and appear to be working 
satisfactorily. 


Zi PS ee B contains the details of the 
COMSEC eq anagement plan. The events which preceded 
the recent procurement of KG-34s illustrate the need to 
establish an Office of Communications (OC) COMSEC equipment 
management program, which assigns responsibility for program- 
ming, procurement, allocation, and maintenance of the equip- 
ment. Such a program, consistent with the OC reorganization, 
should be implemented to ensure that OC has adequate COMSEC 
equipment resources available to meet both the programmed 
and unprogrammed requirements. 


3. [| | It is recommended that the proposed manage- 
ment systéms be implemented as soon as possible to ensure 
their use during the FY 1981 Program Call. | 


25X1A 


Attachments: 
As Stated 
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PROPOSED REQUIREMENTS IDENTIFICATION AND PROGRAMMING PROCEDURES 


The purpose of this paper is to propose a methodology 
for identification and budget programming of communications 
requirements. The proposed method,of necessity, is tied 
tightly to the Program Call timing; however, certain actions 
are scheduled to maintain as much flexibility as possible, 
regardless of the timing of the Program Call. 


The attached functional drawing indicates the various 
steps in the requirements identification and programming cycle. 
It should be noted that throughout the entire process an attempt 
has been made to ensure that all OC components receive all doc- 
umented requirements and that all components have an opportunity 
to participate in the requirements assessment and programming 
reviews. Each functional step is described below. 


Requirements Solicitation 


ED/SIS will solicit requirements from the four 
directorates in early September of each year. Requirements 
for Engineering Division programming action will be solicited 
from OC divisions in the same time frame but will not be 
required until early January to allow receipt and consideration 
of the directorates' requirements. 


ED/SIS will ensure that the OC divisions and staffs 
receive all requirements submissions from the directorates. 
This is expected to occur circa 1-15 December each year. 


Coordinators Meeting 


In mid-December each year, division and staff requirements 
coordinators will meet to review the directorates' requirements 
and assign programming responsibility for them. 


Program Preparation 


Assuming that the preceding actions occur as scheduled, 
program preparation can begin in mid-December. While each 
division has mutually exclusive programming responsibilities, 
it is expected that considerable interaction between OC com- 
ponents and with other Agency components will be required to 
further define the requirements. The SRM and the division/staff 
coordinators will act as focal points for arranging necessary 
discussions both within and outside OC. 
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Draft Program Review 


The division and staff coordinators will meet again, 
circa 1 February, to review draft programs and ensure that all 
requirements have been addressed. 


Programming Action Feedback 


The programming actions for new communications 
requirements will be forwarded to the directorates immediately 
following program submission to the DDA. Thus, DDA offices 
will be able to defend their requirements during finalization 
and review of the DDA program, and directorates will have 
pertinent OC programming information at the time of the 
Executive Advisory Group budget review. 


Budget Review Feedback 


Information concerning the status of the OC new support 
requirements decision unit, as it relates to customer 
requirements, will be sent to the directorates following the 
various budget reviews. Initial plans are to accomplish this 
only after the Executive Advisory Group, Office of Management 
and Budget, and Congressional reviews. The intent of this 
action is twofold: 1) to keep the directorates apprised of the 
budgetary actions which affect the communications support for 
operational programs; 2) to notify the directorates of specific 
program cuts in order that those requirements may be revalidated 
and restated for the following program cycle, or be identified 
as hard unfunded requirements. 


Attachment: 
Drawing 
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DIRECTORATES 
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PROPOSED OC MANAGEMENT PROGRAM FOR COMSEC EQUIPMENT 


Ls [sd The purpose of this paper is to propose a 
program to manage the COMSEC equipment resources of the Office 
of Communications. This management program is integrated 
into the proposed Requirements Handling and Programming 
Procedures, to the maximum extent possible. A brief descrip- 
tion of the procurement cycle for COMSEC equipment is 
provided for background information, and is followed by the 
proposal for the OC COMSEC Equipment Management Program. 


be |_| Perhaps the major need for the management 
program 1s e to the'unique"” nature of the programming 

and procurement cycle for COMSEC equipment. The normal 
budget cycle is followed, in that funds are requested in 

the program year and, assuming Congressional approval is 
received two years later, may be obligated for purchase 

of equipment from the National Security Agency (NSA). 
Although NSA accepts this order, production may not begin 

for 18-24 months, or even longer, depending upon the NSA 
procurement/contract schedule. Once production is started, 
it is normally about one to two years before the equipment 

is actually received. The extended period of the programming 
and procurement cycle effectively requires OC customers to 
state their projected needs a minimum of four to six years 

in advance if OC is to ensure that the COMSEC equipment 

will be available. In turn, OC must program large sums 

of money four to six years in the future without the 

benefit of "hard" requirements from their customers. 


Bi Lala following actions and managerial responsi- 
bilities the “backbone” of the program proposed to 
provided effective management of COMSEC equipment for OC. 
These actions, as well as the events which would occur 
during a procurement cycle of COMSEC equipment, are 
illustrated on the attached functional drawing. 


a, Requirements for COMSEC equipment should 
be identified by each component during the normal 
program cycle and forwarded to the Engineering 
Division, Systems Integration Staff (ED/SIS). The 
total requirements for COMSEC equipment will be 
compiled and then reviewed to ensure that the selected 
equipment will allow evolution of the network architec- 
ture according to the Strategic Plan. Following the 
review, this list of requirements will be forwarded 
to the Foreign Networks Division (FND) with a 
recommendation on the type and quantity of equipment 
to program. 
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b. FND will be responsible for the programming 
of all COMSEC equipment with the exception of the new 
support requirements, which will be the responsibility 
of ED/SIS. 


c. A FAN or sub-FAN for funding procurements of 
all COMSEC equipment, spares, and maintenance should 
be established. In the current year, funds from the four 
New Support Fans will be transferred to the COMSEC 
equipment FAN for this purpose. 


d, An order for COMSEC equipment should be 
placed with NSA each year to obligate the approved 
funds. This procedure would allow OC to obligate 
smaller amounts of programmed funds each year rather 
than having to obligate large amounts of reprogrammed 
funds. 


e. Equipment will be allocated to each component 
based on programmed and contingency requirements, the 
level of funding approved for purchase of the equipment, 
and other circumstances pertinent at the time of estab- 
lishing the allocations. 


f. The existing data base used by the Communica- 
tions Security Division for the COMSEC equipment 
accounting procedures should be expanded to include 
the quantity of equipment allocated to each component, 
the quantity issued, and the stock level. 
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1 December 1978 


MEMORANDUM FOR: OC Executive Board Members 


; Nitations Security Division, OC 


SUBJECT : Protection of Unclassified Circuitry Within 
The Staff Network 

REFERENCES : A. PD-24, dated 16 November ae 
B. NSA: N/0817, dated 7 July 19 


C. NSA: N/0880, dated 20 July 1978 


BACKGROUND 
1. Reference A contains the following pertinent passages: 


a. "Unclassified information transmitted by and 
between Government agencies and contractors 
that would be useful to an adversary should 
be protected." 


b. "COMSEC is concerned with protective measures 
designed for the security of classified informa- 
tion and other information related to national 


security." 


2. One of the initial tasks of the Subcommittee on Tele- 
communications Protection was to establish appropriate standards 
for protection based upon the collective stated needs of Depart - 
ments and Agencies. This task has never been completed. Instead, 
Commerce has been tasked to survey each Department and Agency 
falling under its aegis and make recommendations for protection 
on a circuit-by-circuit basis. There is no parall fort 
contemplated for the national security community. 11] 


DISCUSSION 


1. Within the Agency Staff Network and within[ _ 
network there are numerous unclassified, unprotecte Uits. 
The bulk of these circuits are 
unclassified. While we are no 6garding the 


types of information passed over these circuits, we can cite 
examples of information "'that would be useful to an adversary." 
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1 December 1978 


SUBJECT: Protection of Unclassified Circuitry Within The 


Staff Network 


4, White| pas not been formally approached on this 
T 


issue, the mos @cent informal comment indicates there is 
still strong feeling against encryption 


RECOMMENDATIONS 


1. OC should publish a policy statement that unclassified 


circuitry for which OC is responsible will be protected unless 
the user can make the case that the information involved is not 
of use to an adversary. 


Za- “(CJ th __|soint Policy Board should approve and 


issue a similar policy statement. 


3. (C) A DDA to DDS&T memorandum should be originated 


advising the — that protection will be programmed and 


implemented 


circuitry to comply with PD-24. 


Distribution: 


BI 


- each OC Executive 
Board Member , w/1 copy of refs 
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FORT GEORGE G. MEADE, MARYLAND 20755 


Serial: N/0880 
20 July 1978 


CONFIDENTIAL 


Director of Communications 
Office of Communications 
Central Intelligence Agency 
Washington, DC 20505 


Dear Sir: 
(U) Please reference the following: 
(a) National Security Council COMSEC Directive, August 1968 


(b) Presidential Directive/NSC--24, Telecommunications 
Protection Policy, dated 16 November 1977 


(c) Executive Order 12036, United States Intelligence 
Activities, dated 24 January 1978 


(C) A primary result of reference (b), which. rescinded reference 
(a), was to divide the government's communications protection responsi- 
. bilities between two Executive Agents: the Secretary of Defense as 
Executive Agent for Communications Security, responsible for the 
protection of classified information and for unclassified national 
security information; and the Secretary of Commerce responsible for the 
protection of government-derived unclassified information, excluding 
that relating to national security (Communications Protection). 


(C) Specific implementation documents are now being prepared. 
While reference (b) assigned to the Department of Commerce a new 
responsibility for protection of certain unclassified government communi- 
cations, there was no intent to alter basic government COMSEC relationships 
and responsibilities. Reference (c) assigns to NSA the responsibility of 
executing the responsibilities of the Secretary of Defense as Executive 
Agent of the government for communications security. NSA is responsible 
for fulfilling all validated COMSEC requirements of the departments and 
agencies, and for prescribing or approving all cryptographic systems or 
techniques used in any manner, including doctrine and procedures governing 
their use. 


(C) In several recent instances, individual departments or agencies 
have initiated actions to procure commercially available cryptographic devices 
using the Data Encryption Standard (DES) or other crypto-algorithm without 
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prior coordination with or approval by this Agency. If it is intended to 
use such devices for COMSEC purposes, i.e€., protectign of all classified 
and unclassified information relating to national Security, ic is highly 
unlikely that they meet specifications which provide an adequate degree 
of security. Additionally, such unllateral action may result in dupli- 
cation of effort, delays in meeting systems requirements, and failure to 
provide the necessary protection for the communications involved. 


(C) It is requested, therefore, that no action be taken to procure, 
test, modify, or implement any cryptographic equipment, algorithm, 
technique or device to be used for COMSEC purposes, i.e., for the pro- 
tection of communications relating to national security, without prior 
coordination with the National Security Agency. All inquiries should be 
addressed to: . 


Deputy Director for Communications Security 
National Security Agency 

Operations Building No. 3 

Fort George G. Meade, MD 20755 


Sinceyely, 


NMAN 
Vice Admiral, U. S, Navy 
Director 


Copy Furnished: 
Director 
Office of Investigations and Security 
Department of Commerce 


Director 
Office of Science and Technology 
Policy 


Chairman 
Federal Communications Commission 


Director 
Defense intelligence Agency 


Director < 
Defense Communications Agency 
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SUBJECT: Revised Policy on Applications of the Data Enéryption Standard (DES) . 


1. Please refer to USCSB Executive Secretariat Memorandum, COMSEC ~~. .Js0'", 
1-3/39, Subject: Algorithm for Application to Unclassified Information, 917)... 
dated 10 March 1975. The Data Encryption Standard (DES) is the national "|, 


standard cryptographic algorithm which resulted fron submissions. eae 
response to public solicitations for encryption algorithms by the National : 
Bureau of Standards (NBS) “in 1973 and 1974, , vo Rae eee tee, se 


ie ® sa he 
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2. At the request of NBS, the National Security Agency (NSA) con- — 

ducted an exhaustive technical analysis of the DES. No shortcuts or ase as 

secret solutions were found and, as a result, NSA confirmed the soundness. -° --. 

of the DES's encryption principle and its suitability to protect an 

unclassified Federal data. - NSA advised the Members of the United States 

©o waunications Security Board of these findings via the reference. NSA eee 

fully certified the Data Encryption Standard implemented by the Department...” 

of Commerce in’ July 1977/as.a standard for the encryption of wiclassified. 


computer data. °° 


3. A number of commercial firms have developed a capability for ~~ 
building equipments ‘and components incorporating the DES algorithm. This. 


time. Considering these recent indus idevelopuents;—and pursuant to 2 
authorities of the Director, NSA, as stated in Executive Order 12036, and 

cour’ tent with recent Presidential decisions concerning protective — 

mea ures for security of classified and unclassified information related 4s 
to na‘.-nal security, a revision of the policy position stated by the . 

reference is appropriate. NSA_will now endorse the use of the DES for — 


encryption of unclassified national security-related information and 


selected classified Information wider certain conditionsy a 


4. NSA endorsement of the use and specific embodiments ef the DES _ 
will depend upon adherence to Standards and procedures established by NSA aS 
for systems employing the DES, and upon conformance with U.S. national ; 
policies controlling the release to foreign entities of U.S. Government 
cryptographic systems. Keying materials for such government uses will be 
produced by NSA and distributed through COMSEC distribution and accounting 
channels. The DES device will not be used when currently held crypto—* 


graphic equipment can satisty 6 COMSEC requirement.” 
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ie 5. All devices using Drs whe uae: Sader: sed by NSA for use to protect 

ssified or unclassified national security-related information will be 
sib eet to U.S. government export control, and to poet tiene, NSA regulaticas ° 
G0: varm ing | control, and handling of ‘exypto-equipment.' ade . 
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